9692 Commits

Author SHA1 Message Date
Jeff Mitchell
3c143bd0d3 Bump deps 2017-09-15 12:44:57 -04:00
Jeff Mitchell
dc6992b3ac changelog++ 2017-09-15 10:12:23 -04:00
Chris Hoffman
33b092b87a changelog++ 2017-09-15 09:07:51 -04:00
Chris Hoffman
8d0a37ce6e changelog++ 2017-09-15 09:06:34 -04:00
Chris Hoffman
010575cb60 Rename "generic" secret backend to "kv" (#3292) 2017-09-15 09:02:29 -04:00
Jeff Mitchell
87581df7dd changelog++ 2017-09-15 01:43:11 -04:00
Jeff Mitchell
60f93a7562 changelog++ 2017-09-15 01:41:38 -04:00
Chris Hoffman
3aa68c0034 Adding support for base_url for Okta api (#3316)
* Adding support for base_url for Okta api

* addressing feedback suggestions, bringing back optional group query

* updating docs

* cleaning up the login method

* clear out production flag if base_url is set

* docs updates

* docs updates
2017-09-15 00:27:45 -04:00
Chris Hoffman
4a8c33cca3 Disable the sys/raw endpoint by default (#3329)
* disable raw endpoint by default

* adding docs

* config option raw -> raw_storage_endpoint

* docs updates

* adding listing on raw endpoint

* reworking tests for enabled raw endpoints

* root protecting base raw endpoint
2017-09-15 00:21:35 -04:00
Jeff Mitchell
2c6e64226c Tests were not actually forcing the intermediate to have a longer TTL
because of mount max TTL constraint. This ups the mount max to force the
test to work as expected.
2017-09-14 22:49:04 -04:00
Jeff Mitchell
1c2bd5b9a1 Add PersonaLookahead operation 2017-09-14 20:54:09 -04:00
Chris Hoffman
9da172d53a changelog++ 2017-09-14 09:08:56 -04:00
Chris Hoffman
ca74cdbc23 update enterprise urls /docs/vault-enterprise -> /docs/enterprise (#3333) 2017-09-13 15:37:40 -04:00
Paul Pieralde
7cb3ff1fb8 Fixed docs to reflect correct HTTP method for /sys/config/auditing endpoing (#3331)
Updated documentation to reflect "Read Single Audit Request Header" endpoint is GET-based.
2017-09-13 11:59:27 -07:00
Jeff Mitchell
1a0deba2d5 changelog++ 2017-09-13 11:46:17 -04:00
Jeff Mitchell
f970aea9f8 Change behavior of TTL in sign-intermediate (#3325)
* Fix using wrong public key in sign-self-issued

* Change behavior of TTL in sign-intermediate

This allows signing CA certs with an expiration past the signer's
NotAfter.

It also change sign-self-issued to replace the Issuer, since it's
potentially RFC legal but stacks won't validate it.

Ref: https://groups.google.com/d/msg/vault-tool/giP69-n2o20/FfhRpW1vAQAJ
2017-09-13 11:42:45 -04:00
Jeff Mitchell
3fc965c309 changelog++ 2017-09-13 11:42:02 -04:00
Jeff Mitchell
2f6c2b88bb Sanitize policy behavior across backends (#3324)
Fixes #3323
Fixes #3318

* Fix tests

* Fix tests
2017-09-13 11:36:52 -04:00
Jeff Mitchell
8b9c24807e Fix typo in transit error 2017-09-13 11:05:57 -04:00
Chris Hoffman
ef89549f11 remove token header from login samples (#3320) 2017-09-11 18:14:05 -04:00
Bruno Miguel Custódio
bfff8b4244 Fix navigation and prameters in the 'gcp' auth backend docs. (#3317) 2017-09-11 15:26:24 -04:00
Jeff Mitchell
6553f31f17 changelog++ 2017-09-11 14:56:25 -04:00
Chris Hoffman
09f272510f Adding latency injector option to -dev mode for storage operations (#3289) 2017-09-11 14:49:08 -04:00
Jose Diaz-Gonzalez
157f2a7741 fix: add missing comma to payload (#3308) 2017-09-11 12:03:43 -04:00
Chris Hoffman
10b20e54f3 Switching atomic vars to int32 to address panic on some architectures (#3314) 2017-09-11 11:17:22 -04:00
Dan Urson
e22d7074b4 Update AWS CloudHSM comparison. (#3311)
* Update AWS CloudHSM comparison.

* Update hsm.html.md

* Update hsm.html.md
2017-09-10 12:54:05 -04:00
Calvin Leung Huang
8a65b1745b Handle errors from getRootConfig on aws logical backend (#3294) 2017-09-08 13:00:29 -04:00
Calvin Leung Huang
38be34423c Fix cassandra tests, explicitly set cluster port if provided (#3296)
* Fix cassandra tests, explicitly set cluster port if provided

* Update cassandra.yml test-fixture

* Add port as part of the config option, fix tests

* Remove hostport splitting in cassandraConnectionProducer.createSession

* Include port in API docs
2017-09-07 23:04:40 -04:00
Calvin Leung Huang
ced217e699 Fix flag parsing on database plugins, exit on parse error (#3305)
* Change FlagSet error handling to flag.ExitOnError

* Ignore os.Args[0] (the command itself) when parsing flags

* Revert to using flag.ContinueOnError
2017-09-07 16:30:00 -04:00
Adam Duke
cc536c2cf4 fix typo in policies documentation (#3302) 2017-09-07 11:55:24 -04:00
Calvin Leung Huang
2fffe60fa0 Update vendored docker deps 2017-09-07 11:05:33 -04:00
Paul Pieralde
33579a84b4 Fix docs for Certificate authentication (#3301)
Fix discrepencies in the documentation for TLS Certificate
authentication. The Delete CRL method has a misleading title and
description.
2017-09-07 10:28:14 -04:00
Paul Pieralde
3f94258789 Fixed small typo in RabbitMQ secret backend. (#3300)
Fixed `name` param for the Delete Role API in the RabbitMQ secret backend.
2017-09-07 10:00:32 -04:00
Chris Hoffman
6f5619b554 Fix unauth bind issues due to lib update (#3293) 2017-09-07 08:46:43 -04:00
Jeff Mitchell
4f3dfb22cf Fix compile after dep update 2017-09-05 18:18:34 -04:00
Jeff Mitchell
b0e29bb2ec Bump deps 2017-09-05 18:06:47 -04:00
Jeff Mitchell
7cd68af8f3 Handle expiration manager being nil 2017-09-05 12:01:02 -04:00
Jeff Mitchell
9afe7330e0
Cut version 0.8.2 v0.8.2 2017-09-05 11:16:44 -04:00
Jeff Mitchell
f0e05957f7 Update version 2017-09-05 11:14:25 -04:00
Chris Hoffman
16fbfeb5ef ExpirationManager restoration to load in the background (#3260) 2017-09-05 11:09:00 -04:00
Jeff Mitchell
051c0b0719 changelog++ 2017-09-05 10:58:32 -04:00
Jeff Mitchell
a07f3eb6e1 Simplify a lot of the mount tuning code (#3285) 2017-09-05 10:57:25 -04:00
Jeff Mitchell
117de0ab8b Bump gcp plugin dep 2017-09-05 10:56:32 -04:00
Chris Hoffman
39e82462e8 changelog++ 2017-09-05 10:37:07 -04:00
Vishal Nayak
1b2607ae12 Fix build (#3288) 2017-09-05 09:02:17 -04:00
Brian Kassouf
de7f39e064 Update locking components from DR replication changes (#3283)
* Update locking components from DR replication changes

* Fix plugin backend test

* Add a comment about needing the statelock:
2017-09-04 19:38:37 -04:00
Jeff Mitchell
00de6d0599 Fix hook 2017-09-04 19:20:39 -04:00
Jeff Mitchell
ec8e0c6258 Add pre-push hook 2017-09-04 19:16:11 -04:00
Jeff Mitchell
87aae673c1 Fix inverted skipinit logic 2017-09-04 18:39:57 -04:00
Jeff Mitchell
57e21c7473 Fix nil pointer on test 2017-09-04 18:08:56 -04:00